contentrain 0.3.4 → 0.4.0

package/README.md

@@ -58,6 +58,7 @@ Requirements:
 | `contentrain generate` | Generate `.contentrain/client/` and `#contentrain` package imports |
 | `contentrain diff` | Review and merge or reject pending `contentrain/*` branches |
 | `contentrain serve` | Start the local review UI or the MCP stdio server |
+| `contentrain studio connect` | Connect a repository to a Studio project |
 | `contentrain studio login` | Authenticate with Contentrain Studio |
 | `contentrain studio logout` | Log out from Studio |
 | `contentrain studio whoami` | Show current authentication status |
@@ -172,11 +173,18 @@ to understand:
 
 The `studio` command group connects the CLI to [Contentrain Studio](https://studio.contentrain.io) for enterprise workflows.
 
-Authenticate:
+Authenticate and connect:
 
 ```bash
 contentrain studio login
 contentrain studio whoami
+contentrain studio connect
+```
+
+The `connect` command links your local repository to a Studio project. It detects the git remote, verifies GitHub App installation, scans for `.contentrain/` configuration, and creates the project — all in one interactive flow.
+
+```bash
+contentrain studio connect --workspace ws-123
 ```
 
 Set up CDN for content delivery:

package/dist/{activity-CtOcAA4X.mjs → activity-DMQsYlzz.mjs}

@@ -1,6 +1,6 @@
 import { i as pc } from "./ui-B5mXontH.mjs";
-import { n as resolveStudioClient } from "./client-D4xW8aLz.mjs";
-import { t as resolveStudioContext } from "./resolve-context-BMV7JwCw.mjs";
+import { n as resolveStudioClient } from "./client-CLV4XoJz.mjs";
+import { t as resolveStudioContext } from "./resolve-context-BwcikcF0.mjs";
 import { defineCommand } from "citty";
 import { intro, log, outro, spinner } from "@clack/prompts";
 //#region src/studio/commands/activity.ts

package/dist/{branches-C_kgqSv9.mjs → branches-D330IxDO.mjs}

@@ -1,6 +1,6 @@
 import { i as pc, r as formatTable, t as formatCount } from "./ui-B5mXontH.mjs";
-import { n as resolveStudioClient } from "./client-D4xW8aLz.mjs";
-import { t as resolveStudioContext } from "./resolve-context-BMV7JwCw.mjs";
+import { n as resolveStudioClient } from "./client-CLV4XoJz.mjs";
+import { t as resolveStudioContext } from "./resolve-context-BwcikcF0.mjs";
 import { defineCommand } from "citty";
 import { confirm, intro, isCancel, log, outro, select, spinner } from "@clack/prompts";
 //#region src/studio/commands/branches.ts

package/dist/{cdn-build-CDv_yM15.mjs → cdn-build-D_d3p4OZ.mjs}

@@ -1,6 +1,6 @@
 import { i as pc, t as formatCount } from "./ui-B5mXontH.mjs";
-import { n as resolveStudioClient } from "./client-D4xW8aLz.mjs";
-import { t as resolveStudioContext } from "./resolve-context-BMV7JwCw.mjs";
+import { n as resolveStudioClient } from "./client-CLV4XoJz.mjs";
+import { t as resolveStudioContext } from "./resolve-context-BwcikcF0.mjs";
 import { defineCommand } from "citty";
 import { intro, log, outro, spinner } from "@clack/prompts";
 //#region src/studio/commands/cdn-build.ts

package/dist/{cdn-init-DXQ-3V_c.mjs → cdn-init-Bhnil0F8.mjs}

@@ -1,6 +1,6 @@
 import { i as pc } from "./ui-B5mXontH.mjs";
-import { n as resolveStudioClient } from "./client-D4xW8aLz.mjs";
-import { t as resolveStudioContext } from "./resolve-context-BMV7JwCw.mjs";
+import { n as resolveStudioClient } from "./client-CLV4XoJz.mjs";
+import { t as resolveStudioContext } from "./resolve-context-BwcikcF0.mjs";
 import { defineCommand } from "citty";
 import { confirm, intro, isCancel, log, outro, spinner } from "@clack/prompts";
 //#region src/studio/commands/cdn-init.ts

package/dist/{client-D4xW8aLz.mjs → client-CLV4XoJz.mjs}

@@ -213,6 +213,24 @@ var StudioApiClient = class {
 	async listProjects(workspaceId) {
 		return this.request("GET", `/api/workspaces/${workspaceId}/projects`);
 	}
+	async createProject(workspaceId, payload) {
+		return this.request("POST", `/api/workspaces/${workspaceId}/projects`, { body: payload });
+	}
+	async listGitHubInstallations() {
+		return this.request("GET", "/api/github/installations");
+	}
+	async getGitHubSetupUrl() {
+		return this.request("GET", "/api/github/setup");
+	}
+	async listGitHubRepos(installationId) {
+		return this.request("GET", "/api/github/repos", { query: { installationId: String(installationId) } });
+	}
+	async scanRepository(installationId, repoFullName) {
+		return this.request("GET", "/api/github/scan", { query: {
+			installationId: String(installationId),
+			repo: repoFullName
+		} });
+	}
 	async listBranches(wid, pid) {
 		return this.request("GET", `/api/workspaces/${wid}/projects/${pid}/branches`);
 	}

package/dist/connect-DiSYnxFd.mjs

@@ -0,0 +1,252 @@
+import { i as pc } from "./ui-B5mXontH.mjs";
+import { c as saveDefaults, n as resolveStudioClient } from "./client-CLV4XoJz.mjs";
+import { n as openBrowser, t as startOAuthServer } from "./oauth-server-1p6y1H30.mjs";
+import { defineCommand } from "citty";
+import { confirm, intro, isCancel, log, outro, select, spinner, text } from "@clack/prompts";
+import { simpleGit } from "simple-git";
+//#region src/studio/commands/connect.ts
+var connect_default = defineCommand({
+	meta: {
+		name: "connect",
+		description: "Connect this repository to a Contentrain Studio project"
+	},
+	args: {
+		workspace: {
+			type: "string",
+			description: "Workspace ID",
+			required: false
+		},
+		json: {
+			type: "boolean",
+			description: "JSON output",
+			required: false
+		}
+	},
+	async run({ args }) {
+		if (!args.json) intro(pc.bold("contentrain studio connect"));
+		try {
+			const client = await resolveStudioClient();
+			const s1 = args.json ? null : spinner();
+			s1?.start("Loading workspaces...");
+			const workspaces = await client.listWorkspaces();
+			s1?.stop(`${workspaces.length} workspace(s) found`);
+			if (workspaces.length === 0) {
+				log.warning("No workspaces found. Create one at studio.contentrain.io first.");
+				outro("");
+				return;
+			}
+			let workspaceId = args.workspace;
+			if (!workspaceId) if (workspaces.length === 1) {
+				workspaceId = workspaces[0].id;
+				if (!args.json) log.info(`Using workspace: ${pc.cyan(workspaces[0].name)}`);
+			} else {
+				const choice = await select({
+					message: "Select workspace",
+					options: workspaces.map((w) => ({
+						value: w.id,
+						label: w.name,
+						hint: w.plan
+					}))
+				});
+				if (isCancel(choice)) {
+					outro(pc.dim("Cancelled"));
+					return;
+				}
+				workspaceId = choice;
+			}
+			const workspace = workspaces.find((w) => w.id === workspaceId);
+			const s2 = args.json ? null : spinner();
+			s2?.start("Checking GitHub App installation...");
+			let installations = await client.listGitHubInstallations();
+			s2?.stop(installations.length > 0 ? `${installations.length} GitHub installation(s) found` : "No GitHub App installed");
+			if (installations.length === 0) {
+				const shouldInstall = await confirm({ message: "The Contentrain GitHub App is required. Install it now?" });
+				if (isCancel(shouldInstall) || !shouldInstall) {
+					outro(pc.dim("Cancelled"));
+					return;
+				}
+				const setupData = await client.getGitHubSetupUrl();
+				const oauth = await startOAuthServer();
+				const installUrl = `${setupData.url}&redirect_uri=${encodeURIComponent(oauth.callbackUrl)}&state=${oauth.state}`;
+				if (!args.json) log.info(`If the browser doesn't open, visit:\n  ${pc.cyan(installUrl)}`);
+				await openBrowser(installUrl);
+				const s2b = args.json ? null : spinner();
+				s2b?.start("Waiting for GitHub App installation...");
+				try {
+					if ((await oauth.waitForCallback()).state !== oauth.state) {
+						s2b?.stop("Failed");
+						log.error("State mismatch. Please try again.");
+						process.exitCode = 1;
+						outro("");
+						return;
+					}
+					s2b?.stop("GitHub App installed");
+				} catch (error) {
+					s2b?.stop("Failed");
+					oauth.close();
+					log.error(error instanceof Error ? error.message : String(error));
+					process.exitCode = 1;
+					outro("");
+					return;
+				}
+				installations = await client.listGitHubInstallations();
+				if (installations.length === 0) {
+					log.error("GitHub App installation not detected. Please try again.");
+					process.exitCode = 1;
+					outro("");
+					return;
+				}
+			}
+			let installation;
+			if (installations.length === 1) {
+				installation = installations[0];
+				if (!args.json) log.info(`Using GitHub account: ${pc.cyan(installation.accountLogin)}`);
+			} else {
+				const choice = await select({
+					message: "Select GitHub account",
+					options: installations.map((inst) => ({
+						value: String(inst.id),
+						label: inst.accountLogin,
+						hint: inst.accountType
+					}))
+				});
+				if (isCancel(choice)) {
+					outro(pc.dim("Cancelled"));
+					return;
+				}
+				installation = installations.find((i) => String(i.id) === choice);
+			}
+			const s3 = args.json ? null : spinner();
+			s3?.start("Detecting git remote...");
+			let detectedRepoFullName = null;
+			try {
+				const origin = (await simpleGit(process.cwd()).getRemotes(true)).find((r) => r.name === "origin");
+				if (origin?.refs?.fetch) detectedRepoFullName = parseGitHubRepoFromUrl(origin.refs.fetch);
+			} catch {}
+			const repos = await client.listGitHubRepos(installation.id);
+			s3?.stop(detectedRepoFullName ? `Detected: ${pc.cyan(detectedRepoFullName)}` : `${repos.length} accessible repo(s)`);
+			let selectedRepo = null;
+			if (detectedRepoFullName) {
+				const match = repos.find((r) => r.fullName === detectedRepoFullName);
+				if (match) {
+					const useDetected = await confirm({ message: `Connect to ${pc.cyan(match.fullName)}?` });
+					if (isCancel(useDetected)) {
+						outro(pc.dim("Cancelled"));
+						return;
+					}
+					selectedRepo = useDetected ? match : await pickRepo(repos);
+				} else {
+					if (!args.json) log.warning(`Detected remote "${detectedRepoFullName}" is not accessible to the GitHub App.`);
+					selectedRepo = await pickRepo(repos);
+				}
+			} else {
+				if (repos.length === 0) {
+					log.error("No repositories accessible. Grant the GitHub App access to your repos.");
+					process.exitCode = 1;
+					outro("");
+					return;
+				}
+				selectedRepo = await pickRepo(repos);
+			}
+			if (!selectedRepo) {
+				outro(pc.dim("Cancelled"));
+				return;
+			}
+			const s4 = args.json ? null : spinner();
+			s4?.start("Scanning repository...");
+			const scan = await client.scanRepository(installation.id, selectedRepo.fullName);
+			s4?.stop(scan.hasContentrain ? "Contentrain configuration found" : "No Contentrain configuration found");
+			if (!scan.hasContentrain) {
+				if (!args.json) {
+					log.warning("No .contentrain/ directory found in the repository.");
+					log.info(`Run ${pc.cyan("contentrain init")} in your project first, then push to ${selectedRepo.defaultBranch}.`);
+				}
+				const proceed = await confirm({ message: "Continue anyway? (You can initialize later)" });
+				if (isCancel(proceed) || !proceed) {
+					outro(pc.dim("Cancelled"));
+					return;
+				}
+			} else if (!args.json) log.info(`Found ${scan.models.length} model(s), ${scan.locales.length} locale(s)`);
+			const projectName = await text({
+				message: "Project name",
+				initialValue: selectedRepo.fullName.split("/")[1] ?? selectedRepo.fullName,
+				validate: (v) => {
+					if (!v.trim()) return "Name is required";
+				}
+			});
+			if (isCancel(projectName)) {
+				outro(pc.dim("Cancelled"));
+				return;
+			}
+			const s5 = args.json ? null : spinner();
+			s5?.start("Creating project...");
+			const project = await client.createProject(workspaceId, {
+				name: projectName,
+				installationId: installation.id,
+				repositoryFullName: selectedRepo.fullName,
+				defaultBranch: selectedRepo.defaultBranch
+			});
+			s5?.stop("Project created");
+			await saveDefaults(workspaceId, project.id);
+			if (args.json) {
+				const output = {
+					workspace: {
+						id: workspace.id,
+						name: workspace.name
+					},
+					project: {
+						id: project.id,
+						name: project.name
+					},
+					repository: selectedRepo.fullName,
+					scan
+				};
+				process.stdout.write(JSON.stringify(output, null, 2));
+				return;
+			}
+			log.success(pc.bold("Project connected!"));
+			log.message("");
+			log.message(`  Workspace:  ${pc.cyan(workspace.name)}`);
+			log.message(`  Project:    ${pc.cyan(project.name)}`);
+			log.message(`  Repository: ${pc.cyan(selectedRepo.fullName)}`);
+			log.message(`  Branch:     ${selectedRepo.defaultBranch}`);
+			log.message("");
+			log.info("Next steps:");
+			log.message(`  ${pc.cyan("contentrain studio status")}    — view project overview`);
+			log.message(`  ${pc.cyan("contentrain studio cdn-init")}  — set up content delivery`);
+			log.message(`  ${pc.cyan("contentrain studio webhooks")}  — configure webhooks`);
+		} catch (error) {
+			log.error(error instanceof Error ? error.message : String(error));
+			process.exitCode = 1;
+		}
+		if (!args.json) outro("");
+	}
+});
+/**
+* Parse owner/repo from a GitHub remote URL.
+* Handles both SSH (git@github.com:owner/repo.git) and HTTPS formats.
+*/
+function parseGitHubRepoFromUrl(url) {
+	const sshMatch = url.match(/github\.com[:/]([^/]+\/[^/]+?)(?:\.git)?$/);
+	if (sshMatch) return sshMatch[1];
+	try {
+		const parsed = new URL(url);
+		if (parsed.hostname === "github.com") return parsed.pathname.replace(/^\//, "").replace(/\.git$/, "");
+	} catch {}
+	return null;
+}
+async function pickRepo(repos) {
+	if (repos.length === 0) return null;
+	const choice = await select({
+		message: "Select repository",
+		options: repos.map((r) => ({
+			value: r.fullName,
+			label: r.fullName,
+			hint: r.private ? "private" : "public"
+		}))
+	});
+	if (isCancel(choice)) return null;
+	return repos.find((r) => r.fullName === choice) ?? null;
+}
+//#endregion
+export { connect_default as default };

package/dist/index.mjs

@@ -5,7 +5,7 @@ import { defineCommand, runMain } from "citty";
 runMain(defineCommand({
 	meta: {
 		name: "contentrain",
-		version: "0.3.4",
+		version: "0.4.0",
 		description: "Contentrain CLI — AI content governance infrastructure"
 	},
 	subCommands: {
@@ -16,7 +16,7 @@ runMain(defineCommand({
 		serve: () => import("./serve-DL4LhWxl.mjs").then((m) => m.default),
 		generate: () => import("./generate-DDEDRLdy.mjs").then((m) => m.default),
 		diff: () => import("./diff-Cq6iSnaD.mjs").then((m) => m.default),
-		studio: () => import("./studio-BmXS_bCq.mjs").then((m) => m.default)
+		studio: () => import("./studio-B8lF0fQx.mjs").then((m) => m.default)
 	}
 }));
 //#endregion

package/dist/login-wRBvHDCi.mjs

@@ -0,0 +1,125 @@
+import { i as pc } from "./ui-B5mXontH.mjs";
+import { i as checkPermissions, o as loadCredentials, s as saveCredentials, t as StudioApiClient } from "./client-CLV4XoJz.mjs";
+import { n as openBrowser, t as startOAuthServer } from "./oauth-server-1p6y1H30.mjs";
+import { defineCommand } from "citty";
+import { confirm, intro, isCancel, log, outro, select, spinner } from "@clack/prompts";
+//#region src/studio/commands/login.ts
+const DEFAULT_STUDIO_URL = "https://studio.contentrain.io";
+var login_default = defineCommand({
+	meta: {
+		name: "login",
+		description: "Authenticate with Contentrain Studio"
+	},
+	args: {
+		url: {
+			type: "string",
+			description: "Studio instance URL",
+			required: false
+		},
+		provider: {
+			type: "string",
+			description: "OAuth provider (github or google)",
+			required: false
+		}
+	},
+	async run({ args }) {
+		intro(pc.bold("contentrain studio login"));
+		try {
+			const studioUrl = (args.url ?? process.env["CONTENTRAIN_STUDIO_URL"] ?? DEFAULT_STUDIO_URL).replace(/\/+$/, "");
+			if (await loadCredentials()) {
+				const reAuth = await confirm({ message: "You are already logged in. Re-authenticate?" });
+				if (isCancel(reAuth) || !reAuth) {
+					outro(pc.dim("Cancelled"));
+					return;
+				}
+			}
+			let provider = args.provider;
+			if (!provider) {
+				const choice = await select({
+					message: "Sign in with",
+					options: [{
+						value: "github",
+						label: "GitHub"
+					}, {
+						value: "google",
+						label: "Google"
+					}]
+				});
+				if (isCancel(choice)) {
+					outro(pc.dim("Cancelled"));
+					return;
+				}
+				provider = choice;
+			}
+			const s = spinner();
+			s.start("Starting authentication...");
+			const oauth = await startOAuthServer();
+			const loginUrl = `${studioUrl}/api/auth/login?provider=${provider}&redirect_uri=${encodeURIComponent(oauth.callbackUrl)}&state=${oauth.state}`;
+			s.stop("Opening browser...");
+			log.info(`If the browser doesn't open, visit:\n  ${pc.cyan(loginUrl)}`);
+			await openBrowser(loginUrl);
+			const s2 = spinner();
+			s2.start("Waiting for authentication...");
+			let result;
+			try {
+				result = await oauth.waitForCallback();
+			} catch (error) {
+				s2.stop("Failed");
+				oauth.close();
+				log.error(error instanceof Error ? error.message : String(error));
+				process.exitCode = 1;
+				outro("");
+				return;
+			}
+			if (result.state !== oauth.state) {
+				s2.stop("Failed");
+				log.error("OAuth state mismatch. This could be a CSRF attack. Please try again.");
+				process.exitCode = 1;
+				outro("");
+				return;
+			}
+			s2.stop("Exchanging token...");
+			const s3 = spinner();
+			s3.start("Completing authentication...");
+			const verifyRes = await globalThis.fetch(`${studioUrl}/api/auth/verify`, {
+				method: "POST",
+				headers: { "Content-Type": "application/json" },
+				body: JSON.stringify({
+					code: result.code,
+					state: result.state,
+					redirectUri: oauth.callbackUrl
+				})
+			});
+			if (!verifyRes.ok) {
+				s3.stop("Failed");
+				log.error("Token exchange failed. Please try again.");
+				process.exitCode = 1;
+				outro("");
+				return;
+			}
+			const tokenData = await verifyRes.json();
+			await saveCredentials({
+				studioUrl,
+				accessToken: tokenData.accessToken,
+				refreshToken: tokenData.refreshToken,
+				expiresAt: tokenData.expiresAt
+			});
+			const user = await new StudioApiClient({
+				studioUrl,
+				accessToken: tokenData.accessToken,
+				refreshToken: tokenData.refreshToken,
+				expiresAt: tokenData.expiresAt
+			}).me();
+			s3.stop("Authenticated");
+			log.success(`Logged in as ${pc.bold(user.email)}`);
+			const permWarning = await checkPermissions();
+			if (permWarning) log.warning(permWarning);
+		} catch (error) {
+			log.error(error instanceof Error ? error.message : String(error));
+			process.exitCode = 1;
+		}
+		outro("");
+	}
+});
+//#endregion
+export { login_default as default };

package/dist/{logout-CRM4fCSH.mjs → logout-xPTGu6vx.mjs}

@@ -1,5 +1,5 @@
 import { i as pc } from "./ui-B5mXontH.mjs";
-import { a as clearCredentials, o as loadCredentials, t as StudioApiClient } from "./client-D4xW8aLz.mjs";
+import { a as clearCredentials, o as loadCredentials, t as StudioApiClient } from "./client-CLV4XoJz.mjs";
 import { defineCommand } from "citty";
 import { intro, log, outro } from "@clack/prompts";
 //#region src/studio/commands/logout.ts

package/dist/{login-CO0hxICh.mjs → oauth-server-1p6y1H30.mjs}

@@ -1,9 +1,19 @@
-import { i as pc } from "./ui-B5mXontH.mjs";
-import { i as checkPermissions, o as loadCredentials, s as saveCredentials, t as StudioApiClient } from "./client-D4xW8aLz.mjs";
-import { defineCommand } from "citty";
-import { confirm, intro, isCancel, log, outro, select, spinner } from "@clack/prompts";
 import { randomUUID } from "node:crypto";
 import { createServer } from "node:http";
+//#region src/utils/browser.ts
+/**
+* Open a URL in the user's default browser (best-effort, platform-aware).
+*/
+async function openBrowser(url) {
+	const { exec } = await import("node:child_process");
+	const command = process.platform === "darwin" ? `open "${url}"` : process.platform === "win32" ? `start "" "${url}"` : `xdg-open "${url}"`;
+	return new Promise((resolve) => {
+		exec(command, () => {
+			resolve();
+		});
+	});
+}
+//#endregion
 //#region src/studio/auth/oauth-server.ts
 const PORT_RANGE_START = 9876;
 const PORT_RANGE_END = 9899;
@@ -112,132 +122,4 @@ function closeServer(server) {
 	} catch {}
 }
 //#endregion
-//#region src/studio/commands/login.ts
-const DEFAULT_STUDIO_URL = "https://studio.contentrain.io";
-var login_default = defineCommand({
-	meta: {
-		name: "login",
-		description: "Authenticate with Contentrain Studio"
-	},
-	args: {
-		url: {
-			type: "string",
-			description: "Studio instance URL",
-			required: false
-		},
-		provider: {
-			type: "string",
-			description: "OAuth provider (github or google)",
-			required: false
-		}
-	},
-	async run({ args }) {
-		intro(pc.bold("contentrain studio login"));
-		try {
-			const studioUrl = (args.url ?? process.env["CONTENTRAIN_STUDIO_URL"] ?? DEFAULT_STUDIO_URL).replace(/\/+$/, "");
-			if (await loadCredentials()) {
-				const reAuth = await confirm({ message: "You are already logged in. Re-authenticate?" });
-				if (isCancel(reAuth) || !reAuth) {
-					outro(pc.dim("Cancelled"));
-					return;
-				}
-			}
-			let provider = args.provider;
-			if (!provider) {
-				const choice = await select({
-					message: "Sign in with",
-					options: [{
-						value: "github",
-						label: "GitHub"
-					}, {
-						value: "google",
-						label: "Google"
-					}]
-				});
-				if (isCancel(choice)) {
-					outro(pc.dim("Cancelled"));
-					return;
-				}
-				provider = choice;
-			}
-			const s = spinner();
-			s.start("Starting authentication...");
-			const oauth = await startOAuthServer();
-			const loginUrl = `${studioUrl}/api/auth/login?provider=${provider}&redirect_uri=${encodeURIComponent(oauth.callbackUrl)}&state=${oauth.state}`;
-			s.stop("Opening browser...");
-			log.info(`If the browser doesn't open, visit:\n  ${pc.cyan(loginUrl)}`);
-			await openBrowser(loginUrl);
-			const s2 = spinner();
-			s2.start("Waiting for authentication...");
-			let result;
-			try {
-				result = await oauth.waitForCallback();
-			} catch (error) {
-				s2.stop("Failed");
-				oauth.close();
-				log.error(error instanceof Error ? error.message : String(error));
-				process.exitCode = 1;
-				outro("");
-				return;
-			}
-			if (result.state !== oauth.state) {
-				s2.stop("Failed");
-				log.error("OAuth state mismatch. This could be a CSRF attack. Please try again.");
-				process.exitCode = 1;
-				outro("");
-				return;
-			}
-			s2.stop("Exchanging token...");
-			const s3 = spinner();
-			s3.start("Completing authentication...");
-			const verifyRes = await globalThis.fetch(`${studioUrl}/api/auth/verify`, {
-				method: "POST",
-				headers: { "Content-Type": "application/json" },
-				body: JSON.stringify({
-					code: result.code,
-					state: result.state,
-					redirectUri: oauth.callbackUrl
-				})
-			});
-			if (!verifyRes.ok) {
-				s3.stop("Failed");
-				log.error("Token exchange failed. Please try again.");
-				process.exitCode = 1;
-				outro("");
-				return;
-			}
-			const tokenData = await verifyRes.json();
-			await saveCredentials({
-				studioUrl,
-				accessToken: tokenData.accessToken,
-				refreshToken: tokenData.refreshToken,
-				expiresAt: tokenData.expiresAt
-			});
-			const user = await new StudioApiClient({
-				studioUrl,
-				accessToken: tokenData.accessToken,
-				refreshToken: tokenData.refreshToken,
-				expiresAt: tokenData.expiresAt
-			}).me();
-			s3.stop("Authenticated");
-			log.success(`Logged in as ${pc.bold(user.email)}`);
-			const permWarning = await checkPermissions();
-			if (permWarning) log.warning(permWarning);
-		} catch (error) {
-			log.error(error instanceof Error ? error.message : String(error));
-			process.exitCode = 1;
-		}
-		outro("");
-	}
-});
-async function openBrowser(url) {
-	const { exec } = await import("node:child_process");
-	const command = process.platform === "darwin" ? `open "${url}"` : process.platform === "win32" ? `start "" "${url}"` : `xdg-open "${url}"`;
-	return new Promise((resolve) => {
-		exec(command, () => {
-			resolve();
-		});
-	});
-}
-//#endregion
-export { login_default as default };
+export { openBrowser as n, startOAuthServer as t };

package/dist/{resolve-context-BMV7JwCw.mjs → resolve-context-BwcikcF0.mjs}

@@ -1,4 +1,4 @@
-import { c as saveDefaults, o as loadCredentials } from "./client-D4xW8aLz.mjs";
+import { c as saveDefaults, o as loadCredentials } from "./client-CLV4XoJz.mjs";
 import { confirm, isCancel, select } from "@clack/prompts";
 //#region src/studio/resolve-context.ts
 /**

package/dist/{status-ts5FvDEZ.mjs → status-UvjbO4eS.mjs}

@@ -1,6 +1,6 @@
 import { i as pc, r as formatTable, t as formatCount } from "./ui-B5mXontH.mjs";
-import { n as resolveStudioClient } from "./client-D4xW8aLz.mjs";
-import { t as resolveStudioContext } from "./resolve-context-BMV7JwCw.mjs";
+import { n as resolveStudioClient } from "./client-CLV4XoJz.mjs";
+import { t as resolveStudioContext } from "./resolve-context-BwcikcF0.mjs";
 import { defineCommand } from "citty";
 import { intro, log, outro, spinner } from "@clack/prompts";
 //#region src/studio/commands/status.ts

package/dist/studio-B8lF0fQx.mjs

@@ -0,0 +1,24 @@
+import { defineCommand } from "citty";
+//#region src/studio/index.ts
+var studio_default = defineCommand({
+	meta: {
+		name: "studio",
+		description: "Interact with Contentrain Studio"
+	},
+	subCommands: {
+		login: () => import("./login-wRBvHDCi.mjs").then((m) => m.default),
+		logout: () => import("./logout-xPTGu6vx.mjs").then((m) => m.default),
+		whoami: () => import("./whoami-CWvTYzum.mjs").then((m) => m.default),
+		connect: () => import("./connect-DiSYnxFd.mjs").then((m) => m.default),
+		status: () => import("./status-UvjbO4eS.mjs").then((m) => m.default),
+		activity: () => import("./activity-DMQsYlzz.mjs").then((m) => m.default),
+		usage: () => import("./usage-BqriRRqE.mjs").then((m) => m.default),
+		branches: () => import("./branches-D330IxDO.mjs").then((m) => m.default),
+		"cdn-init": () => import("./cdn-init-Bhnil0F8.mjs").then((m) => m.default),
+		"cdn-build": () => import("./cdn-build-D_d3p4OZ.mjs").then((m) => m.default),
+		webhooks: () => import("./webhooks-B1OhcCtZ.mjs").then((m) => m.default),
+		submissions: () => import("./submissions-Dw0ChFDi.mjs").then((m) => m.default)
+	}
+});
+//#endregion
+export { studio_default as default };

package/dist/{submissions-6_OCrUNF.mjs → submissions-Dw0ChFDi.mjs}

@@ -1,6 +1,6 @@
 import { i as pc, r as formatTable, t as formatCount } from "./ui-B5mXontH.mjs";
-import { n as resolveStudioClient } from "./client-D4xW8aLz.mjs";
-import { t as resolveStudioContext } from "./resolve-context-BMV7JwCw.mjs";
+import { n as resolveStudioClient } from "./client-CLV4XoJz.mjs";
+import { t as resolveStudioContext } from "./resolve-context-BwcikcF0.mjs";
 import { defineCommand } from "citty";
 import { confirm, intro, isCancel, log, outro, select, spinner } from "@clack/prompts";
 //#region src/studio/commands/submissions.ts

package/dist/{usage-BAb4q7Pz.mjs → usage-BqriRRqE.mjs}

@@ -1,6 +1,6 @@
 import { i as pc, n as formatPercent, r as formatTable } from "./ui-B5mXontH.mjs";
-import { n as resolveStudioClient } from "./client-D4xW8aLz.mjs";
-import { t as resolveStudioContext } from "./resolve-context-BMV7JwCw.mjs";
+import { n as resolveStudioClient } from "./client-CLV4XoJz.mjs";
+import { t as resolveStudioContext } from "./resolve-context-BwcikcF0.mjs";
 import { defineCommand } from "citty";
 import { intro, log, outro, spinner } from "@clack/prompts";
 //#region src/studio/commands/usage.ts

package/dist/{webhooks-C39IItU1.mjs → webhooks-B1OhcCtZ.mjs}

@@ -1,6 +1,6 @@
 import { i as pc, o as statusIcon, r as formatTable } from "./ui-B5mXontH.mjs";
-import { n as resolveStudioClient } from "./client-D4xW8aLz.mjs";
-import { t as resolveStudioContext } from "./resolve-context-BMV7JwCw.mjs";
+import { n as resolveStudioClient } from "./client-CLV4XoJz.mjs";
+import { t as resolveStudioContext } from "./resolve-context-BwcikcF0.mjs";
 import { defineCommand } from "citty";
 import { confirm, intro, isCancel, log, multiselect, outro, select, spinner, text } from "@clack/prompts";
 //#region src/studio/commands/webhooks.ts

package/dist/{whoami-D8NyFKs_.mjs → whoami-CWvTYzum.mjs}

@@ -1,5 +1,5 @@
 import { i as pc } from "./ui-B5mXontH.mjs";
-import { i as checkPermissions, n as resolveStudioClient, r as AuthExpiredError } from "./client-D4xW8aLz.mjs";
+import { i as checkPermissions, n as resolveStudioClient, r as AuthExpiredError } from "./client-CLV4XoJz.mjs";
 import { defineCommand } from "citty";
 import { intro, log, outro } from "@clack/prompts";
 //#region src/studio/commands/whoami.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "contentrain",
-  "version": "0.3.4",
+  "version": "0.4.0",
   "license": "MIT",
   "description": "CLI for Contentrain — AI content governance infrastructure",
   "type": "module",
@@ -47,9 +47,9 @@
     "simple-git": "^3.27.0",
     "ws": "^8.18.0",
     "@contentrain/rules": "0.3.1",
+    "@contentrain/mcp": "1.1.2",
     "@contentrain/query": "5.1.3",
-    "@contentrain/types": "0.4.1",
-    "@contentrain/mcp": "1.1.2"
+    "@contentrain/types": "0.4.1"
   },
   "devDependencies": {
     "@types/ws": "^8.5.0",

package/dist/studio-BmXS_bCq.mjs

@@ -1,23 +0,0 @@
-import { defineCommand } from "citty";
-//#region src/studio/index.ts
-var studio_default = defineCommand({
-	meta: {
-		name: "studio",
-		description: "Interact with Contentrain Studio"
-	},
-	subCommands: {
-		login: () => import("./login-CO0hxICh.mjs").then((m) => m.default),
-		logout: () => import("./logout-CRM4fCSH.mjs").then((m) => m.default),
-		whoami: () => import("./whoami-D8NyFKs_.mjs").then((m) => m.default),
-		status: () => import("./status-ts5FvDEZ.mjs").then((m) => m.default),
-		activity: () => import("./activity-CtOcAA4X.mjs").then((m) => m.default),
-		usage: () => import("./usage-BAb4q7Pz.mjs").then((m) => m.default),
-		branches: () => import("./branches-C_kgqSv9.mjs").then((m) => m.default),
-		"cdn-init": () => import("./cdn-init-DXQ-3V_c.mjs").then((m) => m.default),
-		"cdn-build": () => import("./cdn-build-CDv_yM15.mjs").then((m) => m.default),
-		webhooks: () => import("./webhooks-C39IItU1.mjs").then((m) => m.default),
-		submissions: () => import("./submissions-6_OCrUNF.mjs").then((m) => m.default)
-	}
-});
-//#endregion
-export { studio_default as default };